Email: 345053 Autolearn: 0 AvgScore: 4.30 AvgScanTime: 3.89 sec Spam: 127128 Autolearn: 0 AvgScore: 12.85 AvgScanTime: 4.60 sec Ham: 217925 Autolearn: 0 AvgScore: -0.69 AvgScanTime: 3.48 sec Time Spent Running SA: 372.84 hours Time Spent Processing Spam: 162.48 hours Time Spent Processing Ham: 210.36 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 115465 89.42 90.83 88.59 2 DKIM_SIGNED 104336 83.21 82.07 83.87 3 DCC_CHECK 101998 58.89 80.23 46.43 4 XM_DK_Pass 101592 81.81 79.91 82.92 5 DKIM_VALID 95930 77.68 75.46 78.98 6 XMListUnsubscribeExists 92629 64.27 72.86 59.26 7 DKIM_VALID_AU 82074 63.50 64.56 62.89 8 XM_H_QuotedFrom 67539 44.75 53.13 39.86 9 XM_DK_Undo_02 58603 28.53 46.10 18.28 10 BAYES_99 50834 25.58 39.99 17.17 11 LOC_TINY_FONT_1 47801 33.49 37.60 31.09 12 HTML_FONT_LOW_CONTRAST 46269 35.99 36.40 35.76 13 BAYES_50 45277 46.39 35.62 52.67 14 BAYES_999 43278 21.94 34.04 14.88 15 MIME_HTML_ONLY 40154 25.48 31.59 21.92 16 TR_DCC_Bayes_99 39854 18.07 31.35 10.32 17 FVGT_m_MULTI_ODD 29022 23.02 22.83 23.13 18 XMSubLong 26916 22.96 21.17 24.00 19 HTML_IMAGE_RATIO_02 25652 15.03 20.18 12.02 20 DKIM_VALID_EF 25194 27.20 19.82 31.50 21 XM_Body_Dirty_Words 24254 16.44 19.08 14.90 22 T_KAM_HTML_FONT_INVALID 23850 16.67 18.76 15.45 23 DCC_CHECK_NEGATIVE 23763 39.94 18.69 52.33 24 BOTNET 22083 7.54 17.37 1.81 25 T_TM2_M_HEADER_IN_MSG 20968 20.51 16.49 22.86 26 BOTNET_IPINHOSTNAME 19876 10.75 15.63 7.90 27 RELAYCOUNTRY_META 18985 8.25 14.93 4.35 28 FSL_BULK_SIG 18692 9.17 14.70 5.94 29 XM_UncommonTLD01 18347 6.39 14.43 1.70 30 XM_Evil_Numbers_Gen 18048 11.21 14.20 9.46 31 XM_Multi_Part_URI 17990 14.05 14.15 13.99 32 MultiRelay 17770 14.70 13.98 15.11 33 XMSexyCombo_05 12782 6.91 10.05 5.08 34 XM_B_Phish_Phrases 12647 8.32 9.95 7.37 35 HTML_IMAGE_RATIO_04 12036 8.42 9.47 7.81 36 LOTS_OF_MONEY 11582 8.95 9.11 8.85 37 UNTRUSTED_Relay 11128 3.92 8.75 1.11 38 TR_XM_DocInvoice 10749 5.61 8.46 3.96 39 FROM_EXCESS_BASE64 10418 6.60 8.19 5.67 40 T_XMDrugObfuBody_14 10362 7.55 8.15 7.20 41 XM_H_Long_From01 10081 6.60 7.93 5.83 42 TooManyTo_001 9644 6.61 7.59 6.04 43 XMSubMetaSx_00 8919 5.72 7.02 4.96 44 RCVD_IN_RP_SAFE 8890 12.05 6.99 15.00 45 T_REMOTE_IMAGE 8510 4.70 6.69 3.54 46 DKIM_INVALID 8406 5.52 6.61 4.89 47 BAYES_80 8389 5.33 6.60 4.59 48 BAYES_60 8364 6.88 6.58 7.06 49 MPART_ALT_DIFF 8119 4.86 6.39 3.97 50 RCVD_IN_RP_CERTIFIED 7549 11.19 5.94 14.25 51 ALL_TRUSTED 7408 9.50 5.83 11.64 52 XMStrtUSub 7253 5.98 5.71 6.14 53 LotsOfNums_01 7241 7.54 5.70 8.61 54 HTML_MIME_NO_HTML_TAG 6938 2.81 5.46 1.26 55 SpammyFromTLD_02 6845 2.09 5.38 0.17 56 BAYES_95 6664 4.10 5.24 3.44 57 INVALID_MSGID 6636 2.10 5.22 0.28 58 TO_MALFORMED 6284 2.08 4.94 0.41 59 MIME_HTML_MOSTLY 5720 4.06 4.50 3.81 60 BODY_URI_ONLY 5406 1.59 4.25 0.04 61 HTML_IMAGE_RATIO_06 5401 4.04 4.25 3.92 62 XM_UB50 5323 1.95 4.19 0.65 63 HTML_SHORT_LINK_IMG_1 5277 1.54 4.15 0.02 64 NO_DNS_FOR_FROM 5145 3.51 4.05 3.20 65 SHORTENED_URL_SRC 5112 1.48 4.02 0.00 66 SHORTENER_SHORT_IMG 5086 1.47 4.00 0.00 67 URI_BUFFLY 5085 1.47 4.00 0.00 68 HTML_IMAGE_ONLY_04 5047 1.49 3.97 0.04 69 MISSING_HEADERS 4979 1.70 3.92 0.41 70 XMNumbers 4878 4.11 3.84 4.27 71 XM_SendGrid 4808 4.99 3.78 5.69 72 MIME_HEADER_CTYPE_ONLY 4727 1.47 3.72 0.16 73 XM_OfRef6 4723 2.23 3.72 1.36 74 RCVD_IN_RP_RNBL 4618 1.40 3.63 0.10 75 HTML_SHORT_CENTER 4582 1.33 3.60 0.01 76 TM2_M_URI_OPT_OUT 4455 2.44 3.50 1.83 77 XMBdyGiftCard01 4085 2.87 3.21 2.66 78 RELAYCOUNTRY_CA 3850 2.19 3.03 1.70 79 XM_DIRTYINTL 3834 2.40 3.02 2.05 80 MIME_HTML_ONLY_MULTI 3722 2.00 2.93 1.45 81 UNPARSEABLE_RELAY 3595 5.22 2.83 6.62 82 T_TooManySym_01 3569 5.27 2.81 6.71 83 XM_CamelCaseFrm001 3462 2.32 2.72 2.09 84 XM_SPF_SoftFail 3399 1.62 2.67 1.01 85 MIME_QP_LONG_LINE 3326 3.96 2.62 4.75 86 URI_HEX 3224 1.98 2.54 1.65 87 RCVD_IN_MSPIKE_H2 3188 4.35 2.51 5.43 88 MultiRelay_CC 3174 1.04 2.50 0.19 89 MultiRelay_Combo 3174 1.04 2.50 0.19 90 DKIM_ADSP_NXDOMAIN 3028 1.31 2.38 0.69 91 SUBJ_ALL_CAPS 2939 1.52 2.31 1.06 92 RCVD_IN_BL_SPAMCOP_NET 2939 0.96 2.31 0.17 93 HTML_IMAGE_RATIO_08 2917 2.67 2.29 2.88 94 XMDiploma_00 2845 1.73 2.24 1.43 95 BAYES_00 2754 6.06 2.17 8.33 96 T_XMDrugObfuBody_08 2744 1.61 2.16 1.29 97 XMPhish11 2739 1.52 2.15 1.15 98 XMSubMetaI_00 2630 1.47 2.07 1.12 99 TR_XM_RelayPhish 2497 0.99 1.96 0.42 100 XMSexyCombo_01 2469 1.18 1.94 0.73 101 XM_URI_RBL 2431 0.77 1.91 0.11 102 XMBody_17 2378 1.13 1.87 0.69 103 T_XMHurry_00 2345 1.13 1.84 0.71 104 BOTNET_NORDNS 2330 0.69 1.83 0.02 105 URIBL_BLACK 2309 0.70 1.82 0.05 106 XM_H_Long_From02 2261 1.22 1.78 0.89 107 TR_XM_DK_Bayes 2089 4.81 1.64 6.66 108 URI_TRY_3LD 2077 1.50 1.63 1.42 109 XMHTML_After_End 2033 0.77 1.60 0.29 110 XMPhish30 2015 0.82 1.59 0.37 111 XMPhish14 2010 0.88 1.58 0.47 112 TR_XM_DK_Bayes1 1874 4.52 1.47 6.30 113 BAYES_40 1860 2.33 1.46 2.83 114 XMGenDplmaNmb 1799 1.01 1.42 0.77 115 SUBJ_DOLLARS 1797 0.70 1.41 0.28 116 XM_ProductURIs 1742 1.52 1.37 1.61 117 BAYES_20 1729 1.94 1.36 2.27 118 RELAYCOUNTRY_CN 1728 0.54 1.36 0.07 119 XMGppyBdWords 1704 0.59 1.34 0.16 120 RELAYCOUNTRY_IN 1702 0.53 1.34 0.05 121 DIET_1 1693 0.74 1.33 0.40 122 XM_B_REG_HTML 1676 0.97 1.32 0.76 123 XMStockSpam_06 1665 1.59 1.31 1.75 124 TR_XM_DK_Bayes2 1646 3.99 1.29 5.56 125 XM_UB99 1639 0.49 1.29 0.02 126 RELAYCOUNTRY_GB 1638 0.81 1.29 0.54 127 XMHTMLBadTable_001 1583 1.16 1.25 1.11 128 URIBL_DBL_SPAM 1578 0.47 1.24 0.02 129 RELAYCOUNTRY_AT 1574 0.52 1.24 0.10 130 TM2_M_VERY_LONG_WORD 1563 1.04 1.23 0.93 131 BODY_ENHANCEMENT 1558 0.50 1.23 0.07 132 SpammyFromTLD_01 1489 0.75 1.17 0.51 133 T_TooManySym_02 1488 2.10 1.17 2.64 134 MAILING_LIST_MULTI 1482 1.71 1.17 2.02 135 XM_UB60 1465 0.48 1.15 0.09 136 TR_LOTS_OF_MONEY3 1453 0.62 1.14 0.31 137 T_XMDrugObfuBody_00 1452 0.98 1.14 0.89 138 XM_HighProb1 1427 0.42 1.12 0.01 139 FILL_THIS_FORM 1426 0.78 1.12 0.58 140 XM_RXBody 1411 0.49 1.11 0.13 141 T_FILL_THIS_FORM_LONG 1388 0.71 1.09 0.49 142 XM_JunkDunk 1386 0.40 1.09 0.00 143 FILL_THIS_FORM_LOAN 1289 0.68 1.01 0.48 144 XM_UB999 1282 0.38 1.01 0.01 145 XMBody_78 1261 0.64 0.99 0.44 146 LOW_PRICE 1257 1.01 0.99 1.02 147 XM_DK_Undo_01 1255 1.52 0.99 1.82 148 TR_Caps_n_Bayes_99 1247 0.41 0.98 0.07 149 XMClaimOffer 1247 0.62 0.98 0.41 150 RCVD_IN_IADB_LISTED 1239 3.11 0.97 4.35 151 DATE_IN_PAST_24_48 1217 0.37 0.96 0.03 152 RELAYCOUNTRY_FR 1195 0.45 0.94 0.17 153 BAYES_05 1180 1.31 0.93 1.53 154 PLING_QUERY 1173 0.60 0.92 0.42 155 XMSlimDrugH 1140 0.58 0.90 0.39 156 T_HTML_TAG_BALANCE_CENTER 1133 0.43 0.89 0.16 157 XM_Body_Obfu01 1120 0.40 0.88 0.12 158 XMMoneyMeta_00 1115 0.51 0.88 0.29 159 RCVD_IN_IADB_SPF 1111 2.76 0.87 3.86 160 RDNS_DYNAMIC 1103 0.73 0.87 0.65 161 TR_LOTS_OF_MONEY2 1068 0.47 0.84 0.26 162 T_MONEY_PERCENT 1068 0.47 0.84 0.26 163 RCVD_IN_IADB_SENDERID 1055 2.51 0.83 3.49 164 TVD_SPACE_RATIO_MINFP 1033 0.30 0.81 0.01 165 XMSexyCombo_04 1027 0.50 0.81 0.32 166 RCVD_IN_IADB_DK 1024 2.47 0.81 3.44 167 XMGappySubj_01 1024 0.47 0.81 0.28 168 MPART_ALT_DIFF_COUNT 1022 0.57 0.80 0.44 169 XM_B_COPY_HTML 997 0.67 0.78 0.60 170 TR_Mismatch_TLD_02 996 0.34 0.78 0.08 171 XM_UB80 991 0.32 0.78 0.05 172 RELAYCOUNTRY_DE 986 0.51 0.78 0.35 173 RCVD_IN_MSPIKE_WL 983 1.90 0.77 2.55 174 RCVD_IN_MSPIKE_H3 967 1.89 0.76 2.55 175 T_Symld_Words_02 946 0.57 0.74 0.47 176 HTML_FONT_SIZE_HUGE 932 0.41 0.73 0.23 177 HTML_FONT_FACE_BAD 929 0.65 0.73 0.61 178 HTML_TAG_BALANCE_HEAD 926 0.34 0.73 0.12 179 XM_Combo_Sbj 913 0.45 0.72 0.29 180 XM_H_PHPOS 886 1.12 0.70 1.37 181 XMEqualsVooDoo_00 875 0.27 0.69 0.03 182 RCVD_IN_IADB_VOUCHED 869 1.89 0.68 2.60 183 URI_NOVOWEL 861 0.44 0.68 0.30 184 RELAYCOUNTRY_NL 839 0.36 0.66 0.18 185 DKIM_ADSP_CUSTOM_MED 835 0.91 0.66 1.06 186 HTML_TAG_BALANCE_BODY 801 0.50 0.63 0.43 187 XM_BadFromFormat 787 0.36 0.62 0.21 188 REMOVE_BEFORE_LINK 786 0.37 0.62 0.23 189 XMUrgent 771 0.28 0.61 0.09 190 XMSubject_48 763 0.61 0.60 0.61 191 NML_ADSP_CUSTOM_MED 760 0.68 0.60 0.72 192 LOCALPART_IN_SUBJECT 745 0.23 0.59 0.02 193 XM_OfRef7 730 0.30 0.57 0.14 194 HTML_TITLE_SUBJ_DIFF 725 0.25 0.57 0.06 195 TR_Symld_Words 710 1.13 0.56 1.47 196 FORGED_GMAIL_RCVD 706 0.54 0.56 0.53 197 T_FILL_THIS_FORM_SHORT 705 0.51 0.55 0.49 198 TooManyTo_002 701 1.13 0.55 1.46 199 GAPPY_SUBJECT 696 0.26 0.55 0.08 200 XMSubMetaSSx_00 693 0.35 0.55 0.23 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 193070 89.42 90.83 88.59 2 DKIM_SIGNED 182767 83.21 82.07 83.87 3 XM_DK_Pass 180707 81.81 79.91 82.92 4 DKIM_VALID 172113 77.68 75.46 78.98 5 DKIM_VALID_AU 137048 63.50 64.56 62.89 6 XMListUnsubscribeExists 129149 64.27 72.86 59.26 7 BAYES_50 114787 46.39 35.62 52.67 8 DCC_CHECK_NEGATIVE 114042 39.94 18.69 52.33 9 DCC_CHECK 101193 58.89 80.23 46.43 10 XM_H_QuotedFrom 86855 44.75 53.13 39.86 11 HTML_FONT_LOW_CONTRAST 77932 35.99 36.40 35.76 12 DKIM_VALID_EF 68647 27.20 19.82 31.50 13 LOC_TINY_FONT_1 67748 33.49 37.60 31.09 14 XMSubLong 52309 22.96 21.17 24.00 15 FVGT_m_MULTI_ODD 50416 23.02 22.83 23.13 16 T_TM2_M_HEADER_IN_MSG 49810 20.51 16.49 22.86 17 MIME_HTML_ONLY 47759 25.48 31.59 21.92 18 XM_DKIMWhitelistDomains 44178 12.81 0.02 20.27 19 XM_DK_Undo_02 39845 28.53 46.10 18.28 20 BAYES_99 37421 25.58 39.99 17.17 21 T_KAM_HTML_FONT_INVALID 33667 16.67 18.76 15.45 22 MultiRelay 32938 14.70 13.98 15.11 23 RCVD_IN_RP_SAFE 32690 12.05 6.99 15.00 24 XM_Body_Dirty_Words 32475 16.44 19.08 14.90 25 BAYES_999 32420 21.94 34.04 14.88 26 RCVD_IN_RP_CERTIFIED 31060 11.19 5.94 14.25 27 XM_Multi_Part_URI 30481 14.05 14.15 13.99 28 HTML_IMAGE_RATIO_02 26196 15.03 20.18 12.02 29 ALL_TRUSTED 25374 9.50 5.83 11.64 30 TR_DCC_Bayes_99 22491 18.07 31.35 10.32 31 XM_Evil_Numbers_Gen 20616 11.21 14.20 9.46 32 LOTS_OF_MONEY 19288 8.95 9.11 8.85 33 LotsOfNums_01 18759 7.54 5.70 8.61 34 BAYES_00 18152 6.06 2.17 8.33 35 BOTNET_IPINHOSTNAME 17210 10.75 15.63 7.90 36 HTML_IMAGE_RATIO_04 17013 8.42 9.47 7.81 37 XM_B_Phish_Phrases 16060 8.32 9.95 7.37 38 T_XMDrugObfuBody_14 15683 7.55 8.15 7.20 39 BAYES_60 15391 6.88 6.58 7.06 40 T_TooManySym_01 14628 5.27 2.81 6.71 41 TR_XM_DK_Bayes 14517 4.81 1.64 6.66 42 UNPARSEABLE_RELAY 14417 5.22 2.83 6.62 43 TR_XM_DK_Bayes1 13733 4.52 1.47 6.30 44 XMStrtUSub 13391 5.98 5.71 6.14 45 TVD_RCVD_IP 13233 3.97 0.36 6.07 46 TooManyTo_001 13158 6.61 7.59 6.04 47 FSL_BULK_SIG 12940 9.17 14.70 5.94 48 XM_H_Long_From01 12696 6.60 7.93 5.83 49 XM_SendGrid 12401 4.99 3.78 5.69 50 FROM_EXCESS_BASE64 12365 6.60 8.19 5.67 51 TR_XM_DK_Bayes2 12111 3.99 1.29 5.56 52 RCVD_IN_MSPIKE_H2 11834 4.35 2.51 5.43 53 XMSexyCombo_05 11072 6.91 10.05 5.08 54 XMSubMetaSx_00 10810 5.72 7.02 4.96 55 DKIM_INVALID 10654 5.52 6.61 4.89 56 MIME_QP_LONG_LINE 10349 3.96 2.62 4.75 57 BAYES_80 10007 5.33 6.60 4.59 58 RCVD_IN_IADB_LISTED 9488 3.11 0.97 4.35 59 RELAYCOUNTRY_META 9473 8.25 14.93 4.35 60 XMNumbers 9306 4.11 3.84 4.27 61 MPART_ALT_DIFF 8661 4.86 6.39 3.97 62 TR_XM_DocInvoice 8619 5.61 8.46 3.96 63 HTML_IMAGE_RATIO_06 8536 4.04 4.25 3.92 64 RCVD_IN_IADB_SPF 8409 2.76 0.87 3.86 65 MIME_HTML_MOSTLY 8300 4.06 4.50 3.81 66 IN_ZIMBRA_NJ_WHITELIST 8270 2.40 0.01 3.79 67 T_REMOTE_IMAGE 7712 4.70 6.69 3.54 68 RCVD_IN_IADB_SENDERID 7599 2.51 0.83 3.49 69 BAYES_95 7488 4.10 5.24 3.44 70 RCVD_IN_IADB_DK 7487 2.47 0.81 3.44 71 BOUNCE_MESSAGE 7029 2.12 0.24 3.23 72 ANY_BOUNCE_MESSAGE 7029 2.12 0.24 3.23 73 NO_DNS_FOR_FROM 6970 3.51 4.05 3.20 74 HTML_IMAGE_RATIO_08 6279 2.67 2.29 2.88 75 BAYES_40 6174 2.33 1.46 2.83 76 XMBdyGiftCard01 5807 2.87 3.21 2.66 77 USER_IN_DEF_DKIM_WL 5750 1.67 0.01 2.64 78 T_TooManySym_02 5749 2.10 1.17 2.64 79 RCVD_IN_IADB_VOUCHED 5664 1.89 0.68 2.60 80 RCVD_IN_MSPIKE_WL 5562 1.90 0.77 2.55 81 RCVD_IN_MSPIKE_H3 5560 1.89 0.76 2.55 82 BAYES_20 4950 1.94 1.36 2.27 83 IN_HORDE_ADDRESS_BOOK 4754 1.40 0.07 2.18 84 XM_CamelCaseFrm001 4556 2.32 2.72 2.09 85 XM_DIRTYINTL 4464 2.40 3.02 2.05 86 MAILING_LIST_MULTI 4408 1.71 1.17 2.02 87 TM2_M_URI_OPT_OUT 3979 2.44 3.50 1.83 88 XM_DK_Undo_01 3976 1.52 0.99 1.82 89 BOTNET 3948 7.54 17.37 1.81 90 XMStockSpam_06 3805 1.59 1.31 1.75 91 RELAYCOUNTRY_CA 3714 2.19 3.03 1.70 92 XM_UncommonTLD01 3697 6.39 14.43 1.70 93 URI_HEX 3594 1.98 2.54 1.65 94 XM_ProductURIs 3503 1.52 1.37 1.61 95 XM_PDF 3497 1.14 0.34 1.60 96 XM_GoogleGroups 3380 1.12 0.38 1.55 97 BAYES_05 3342 1.31 0.93 1.53 98 RCVD_IN_IADB_OPTIN 3311 1.15 0.51 1.52 99 TR_Symld_Words 3199 1.13 0.56 1.47 100 TooManyTo_002 3191 1.13 0.55 1.46 101 MIME_HTML_ONLY_MULTI 3170 2.00 2.93 1.45 102 XMDiploma_00 3112 1.73 2.24 1.43 103 URI_TRY_3LD 3102 1.50 1.63 1.42 104 XMSubMetaSxObfu_02 3095 1.03 0.37 1.42 105 XM_H_PHPOS 2995 1.12 0.70 1.37 106 XM_OfRef6 2962 2.23 3.72 1.36 107 T_XMDrugObfuBody_08 2815 1.61 2.16 1.29 108 HTML_MIME_NO_HTML_TAG 2754 2.81 5.46 1.26 109 XMPhish11 2515 1.52 2.15 1.15 110 XMBody_95 2452 0.79 0.21 1.13 111 XMSubMetaI_00 2444 1.47 2.07 1.12 112 XMHTMLBadTable_001 2423 1.16 1.25 1.11 113 UNTRUSTED_Relay 2414 3.92 8.75 1.11 114 USER_IN_WHITELIST 2382 0.69 0.00 1.09 115 TooManyTo_003 2332 0.86 0.50 1.07 116 T_TooManySym_03 2326 0.74 0.19 1.07 117 SUBJ_ALL_CAPS 2308 1.52 2.31 1.06 118 DKIM_ADSP_CUSTOM_MED 2300 0.91 0.66 1.06 119 LOW_PRICE 2227 1.01 0.99 1.02 120 XM_SPF_SoftFail 2206 1.62 2.67 1.01 121 XM_H_PHPMailer 2148 0.81 0.50 0.99 122 TM2_M_VERY_LONG_WORD 2026 1.04 1.23 0.93 123 TR_MetaPhish_Combo_01 1974 0.75 0.47 0.91 124 TooManyTo_004 1961 0.70 0.37 0.90 125 XM_H_Long_From02 1949 1.22 1.78 0.89 126 T_XMDrugObfuBody_00 1939 0.98 1.14 0.89 127 TooManyTo_005 1759 0.63 0.32 0.81 128 XMBrknScrpt_02 1725 0.65 0.40 0.79 129 XMGenDplmaNmb 1684 1.01 1.42 0.77 130 XM_B_REG_HTML 1667 0.97 1.32 0.76 131 XMSexyCombo_01 1596 1.18 1.94 0.73 132 NML_ADSP_CUSTOM_MED 1578 0.68 0.60 0.72 133 T_XMHurry_00 1540 1.13 1.84 0.71 134 XM_Walgreens_Forge 1515 0.44 0.00 0.70 135 XMBody_17 1514 1.13 1.87 0.69 136 DKIM_ADSP_NXDOMAIN 1504 1.31 2.38 0.69 137 XM_H_PHPOS_M 1491 0.53 0.26 0.68 138 XM_UB50 1420 1.95 4.19 0.65 139 RDNS_DYNAMIC 1417 0.73 0.87 0.65 140 XMSubject_48 1340 0.61 0.60 0.61 141 HTML_FONT_FACE_BAD 1322 0.65 0.73 0.61 142 XM_B_COPY_HTML 1306 0.67 0.78 0.60 143 XMLngstWrd_00 1274 0.48 0.29 0.58 144 FILL_THIS_FORM 1270 0.78 1.12 0.58 145 TM2_M_A_HREF_HREF 1246 0.54 0.48 0.57 146 T_TooManySym_04 1245 0.37 0.02 0.57 147 XMLngstWrd_01 1178 0.43 0.25 0.54 148 RELAYCOUNTRY_GB 1166 0.81 1.29 0.54 149 FORGED_GMAIL_RCVD 1163 0.54 0.56 0.53 150 HELO_NODOT 1161 0.37 0.09 0.53 151 SpammyFromTLD_01 1116 0.75 1.17 0.51 152 T_FILL_THIS_FORM_SHORT 1068 0.51 0.55 0.49 153 T_FILL_THIS_FORM_LONG 1062 0.71 1.09 0.49 154 FILL_THIS_FORM_LOAN 1055 0.68 1.01 0.48 155 XMCapTrack 1045 0.39 0.24 0.48 156 T_Symld_Words_02 1035 0.57 0.74 0.47 157 XMPhish14 1027 0.88 1.58 0.47 158 XMNoVowels 1010 0.39 0.26 0.46 159 XMSubMetaSxObfu_03 998 0.47 0.50 0.46 160 XMBody_78 963 0.64 0.99 0.44 161 MPART_ALT_DIFF_COUNT 949 0.57 0.80 0.44 162 HTML_TAG_BALANCE_BODY 932 0.50 0.63 0.43 163 TR_XM_RelayPhish 925 0.99 1.96 0.42 164 PLING_QUERY 913 0.60 0.92 0.42 165 XM_D_tchamptons_WL 906 0.27 0.01 0.42 166 XMClaimOffer 902 0.62 0.98 0.41 167 TO_MALFORMED 886 2.08 4.94 0.41 168 MISSING_HEADERS 885 1.70 3.92 0.41 169 HTTPS_HTTP_MISMATCH 882 0.37 0.30 0.40 170 DIET_1 875 0.74 1.33 0.40 171 XMSlimDrugH 849 0.58 0.90 0.39 172 KHOP_DYNAMIC 838 0.35 0.30 0.38 173 XMBody_29 816 0.30 0.16 0.37 174 RELAYCOUNTRY_AU 812 0.36 0.33 0.37 175 XMPhish30 807 0.82 1.59 0.37 176 RELAYCOUNTRY_DE 766 0.51 0.78 0.35 177 XMSolicitRefs_0 763 0.32 0.28 0.35 178 HTML_IMAGE_ONLY_32 694 0.31 0.29 0.32 179 FROM_EGROUPS 693 0.20 0.00 0.32 180 XMSexyCombo_04 690 0.50 0.81 0.32 181 TR_LOTS_OF_MONEY3 681 0.62 1.14 0.31 182 XM_Ancestry_Forge 677 0.21 0.05 0.31 183 XM_ShortIntro_01 664 0.29 0.26 0.30 184 URI_NOVOWEL 646 0.44 0.68 0.30 185 XMStockSpam_01 638 0.21 0.06 0.29 186 XMMoneyMeta_00 635 0.51 0.88 0.29 187 XM_Combo_Sbj 634 0.45 0.72 0.29 188 XMHTML_After_End 629 0.77 1.60 0.29 189 TM2_M_BODY_EMPTY 619 0.21 0.07 0.28 190 XMDateMe_00 619 0.26 0.21 0.28 191 SUBJ_DOLLARS 616 0.70 1.41 0.28 192 INVALID_MSGID 608 2.10 5.22 0.28 193 XMGappySubj_01 605 0.47 0.81 0.28 194 T_TooManySym_05 574 0.17 0.00 0.26 195 TVD_SPACE_RATIO 572 0.32 0.43 0.26 196 HTML_IMAGE_ONLY_28 564 0.27 0.28 0.26 197 TR_LOTS_OF_MONEY2 560 0.47 0.84 0.26 198 T_MONEY_PERCENT 560 0.47 0.84 0.26 199 XM_S_JOY_D 556 0.30 0.37 0.26 200 XMRcvdHeader_15 542 0.16 0.00 0.25 ----------------------------------------------------------------------